Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32332d3233203d3e203533313536.roa
File:                     3138362e3231312e322e302f32332d3233203d3e203533313536.roa (raw, json)
Hash identifier:          F7RcADpkMAdgXpEKxfpTdCRk7sgkjDkJa6VwdOrAOwU=
Subject key identifier:   49:C2:2A:25:DC:91:C2:0B:00:58:A8:30:A5:FB:05:00:40:34:9A:49
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       54E566D2BDAECAFA2F5B8FABF4BC357C12F7EA63
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32332d3233203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:27:44 +0000
ROA not before:           Sat 12 Jul 2025 14:22:44 +0000
ROA not after:            Sat 11 Jul 2026 14:27:44 +0000
asID:                     53156
IP address blocks:        186.211.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e5:66:d2:bd:ae:ca:fa:2f:5b:8f:ab:f4:bc:35:7c:12:f7:ea:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:22:44 2025 GMT
            Not After : Jul 11 14:27:44 2026 GMT
        Subject: CN=49C22A25DC91C20B0058A830A5FB050040349A49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:95:4d:b6:a2:d4:3f:6d:39:6b:97:be:76:
                    96:ea:3a:69:8f:34:12:fb:6c:18:36:55:0d:de:5a:
                    77:c9:32:ed:d2:80:84:7b:40:ac:4e:a4:4a:8c:f5:
                    b7:53:e1:30:14:eb:97:77:39:f6:65:df:46:a2:a0:
                    f1:38:e6:82:84:d6:0e:3f:d2:d7:5f:ad:58:32:2e:
                    17:71:15:d1:f0:10:b8:69:35:10:5d:34:a6:05:01:
                    29:ed:86:af:a3:60:0c:14:07:1b:94:9a:a0:e0:88:
                    2f:c9:b5:59:ee:5a:cb:d2:3a:97:49:45:95:da:f1:
                    c5:b8:e2:40:91:34:6e:14:9e:4a:b3:1c:fd:d7:e1:
                    c6:c3:4c:85:69:be:a8:ba:0a:98:1a:e2:5a:be:5a:
                    f6:15:f5:72:f5:e8:a2:61:6e:06:b3:03:f4:93:8d:
                    0c:bb:23:28:36:fa:15:1c:ee:d5:c0:2e:2a:9b:a2:
                    21:00:37:55:14:c8:28:e1:12:2c:43:fc:57:f3:d6:
                    3a:a4:a5:19:43:50:2e:8b:0f:4f:1a:40:08:58:e7:
                    7d:a0:89:91:71:97:aa:ca:78:08:71:4c:96:5a:bb:
                    c6:e9:fc:47:51:dd:40:0a:f2:29:2d:9a:ec:03:c4:
                    d2:51:f9:2f:fe:c9:7b:37:7b:ae:df:c6:9b:15:4a:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C2:2A:25:DC:91:C2:0B:00:58:A8:30:A5:FB:05:00:40:34:9A:49
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/3138362e3231312e322e302f32332d3233203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:55:d0:27:d6:10:fd:04:6a:bf:1a:3f:bd:82:d6:cd:d8:
         c9:ed:00:31:36:77:39:8b:9d:5d:93:98:b6:33:d4:d1:f0:48:
         42:c8:92:e2:46:7e:6b:9d:e1:36:41:d7:a0:87:b3:ed:39:18:
         2a:d8:6a:c9:c2:10:10:bc:ca:71:27:39:9e:79:27:11:2d:f2:
         0d:ab:9a:e3:ea:a0:14:1c:37:bd:ee:72:5d:51:e4:18:1a:c6:
         a1:70:cf:cc:e6:07:5d:a5:67:0d:6d:d7:a2:c0:1c:58:2b:cf:
         83:14:41:95:43:e0:0d:41:99:24:7f:aa:a6:f6:60:98:e6:9b:
         0b:2d:e8:2a:f8:ce:e9:44:ef:85:85:6f:f8:bc:af:74:d3:97:
         81:04:e3:5f:81:5d:55:2b:50:ca:31:33:87:a8:75:51:fd:5a:
         86:39:cc:fd:c0:cf:aa:e7:18:e3:d8:4a:da:07:d3:d7:e7:95:
         53:0e:8f:5e:c1:86:06:02:f5:39:cb:df:99:88:ed:82:65:5d:
         0a:e5:4e:09:94:69:8e:2d:1b:0c:ec:98:1d:a2:54:97:fd:4e:
         05:e0:e1:1e:47:f6:5a:5a:77:eb:c0:9e:32:8d:69:c7:8d:b6:
         72:8d:b5:f1:60:7c:d0:59:87:9d:01:a7:c0:8a:57:31:bd:6c:
         b4:07:21:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:17 2025 by rpki-client